Data Processing Agreement
Last updated · By David Nelson
Version 2026-11-03. This agreement covers personal data RigReady CDL processes for a school through the school portal.
The school is the controller of its student and staff records. RigReady CDL processes them only to provide the service.
Data covered
- Names and email addresses of students, instructors, and administrators
- Class membership and join history
- Trainer results: trainer, mode, score, pass or not yet, and date
How we process it
- Only to run the school portal and student accounts
- Never sold, never used for ads, never shared with other schools
- Access limited to RigReady staff who support your school
Service providers
We use hosting, database, and email delivery providers to run the service. They process data only on our instructions and under confidentiality terms.
Security
Data is encrypted in transit, stored in access-controlled systems, and separated so one school cannot see another school's records. Administrative changes are logged.
Breach notice
If we learn of a breach involving your school's data, we notify your school administrator by email within 72 hours.
Requests from students
Students can download or delete their own account data from their Account page. Requests we receive about school records are passed to the school.
Return and deletion
When the agreement ends, we delete the school's records within 60 days, or return them first if the school asks in writing.
Contact
Email hello@rigreadycdl.com.